LDAPAccountManager LAM up to 8.x Setting mainmanage.php external reference

Summaryinfo

A vulnerability identified as problematic has been detected in LDAPAccountManager LAM up to 8.x. The impacted element is an unknown function of the file mainmanage.php of the component Setting Handler. Performing a manipulation results in external reference. This vulnerability is identified as CVE-2024-52792. The attack can be initiated remotely. There is not any exploit available. You should upgrade the affected component.

Detailsinfo

A vulnerability classified as problematic has been found in LDAPAccountManager LAM up to 8.x. This affects some unknown functionality of the file mainmanage.php of the component Setting Handler. The manipulation with an unknown input leads to a external reference vulnerability. CWE is classifying the issue as CWE-610. The product uses an externally controlled name or reference that resolves to a resource that is outside of the intended control sphere. This is going to have an impact on integrity, and availability. The summary by CVE is:

LDAP Account Manager (LAM) is a php webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. In affected versions LAM does not properly sanitize configuration values, that are set via `mainmanage.php` and `confmain.php`. This allows setting arbitrary config values and thus effectively bypassing `mitigation` of CVE-2024-23333/GHSA-fm9w-7m7v-wxqv. Configuration values for the main config or server profiles are set via `mainmanage.php` and `confmain.php`. The values are written to `config.cfg` or `serverprofile.conf` in the format of `settingsName: settingsValue` line-by-line. An attacker can smuggle arbitrary config values in a config file, by inserting a newline into certain config fields, followed by the value. This vulnerability has been addressed in version 9.0. All users are advised to upgrade. There are no known workarounds for this vulnerability.

The advisory is shared at github.com. This vulnerability is uniquely identified as CVE-2024-52792 since 11/15/2024. The exploitability is told to be easy. It is possible to initiate the attack remotely. The exploitation needs additional levels of successful authentication. Technical details are known, but no exploit is available.

By approaching the search of inurl:mainmanage.php it is possible to find vulnerable targets with Google Hacking. The vulnerability scanner Nessus provides a plugin with the ID 230759 (Linux Distros Unpatched Vulnerability : CVE-2024-52792), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 9.0 eliminates this vulnerability. The upgrade is hosted for download at github.com.

The vulnerability is also documented in the vulnerability database at Tenable (230759). Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Type

• Directory Service Software

Vendor

• LDAPAccountManager

Name

• LAM

Version

• 8.x

Website

• Product: https://github.com/LDAPAccountManager/lam/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion